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(54) A method of monitoring a cellular mobile radio system to derive location area Information 



(57) A method is provided for deriving information 
about location areas in a cellular mobile radio system 
that comprises a fixed part providing radio coverage in a 
plurality of cells logically grouped into location areas, and 
mobile stations for communicating with the fixed part of 
the system. In such systems, each mobile station passes 
location update messages to the fixed part of the system, 
at least upon changing location areas, to enable the fixed 
part to keep track of the mobile stations. The present 



method involves monitoring these location update mes- 
sages to extract location-area related data, and then 
combining (30. 31, 32) the data extracted from many 
such messages to produce location-area related infor- 
mation such as lists of cells (35) making up each location 
area, the identity of gateway cells in each location area, 
lists (36) of adjacent location areas, and the id^ity of 
the most used location areas. 
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Description 

Technical Field 

The present invention relates to the derivation of 
information about location areas in cellular mobile radio 
systems such as systems operating according to the 
GSM or DCS1 800 standards. For convenience, systems 
operating according to the GSM and DCS1800 stand- 
ards, including derivatives thereof, will hereinafter be 
referred to as **GSM-type" systems. DCS1800 systems 
themselves being derivative of GSM systems and exhib- 
iting the same characteristics for present purposes; it 
should, however, be noted that the present invention is 
not restricted to GSM-type systems. 

Background Art 

A modem cellular mobile radio system, such as a 
GSM-type system, comprises a fixed part providing radio 
coverage in a plurality of cells logically grouped into loca- 
tion areas, and mobile stations for communicatir^ with 
the fixed part of the system. In order to enable the fixed 
part of the system to locate a mobile station for the pur- 
pose of passing a new call to that mobile, the fixed sys- 
tem part keeps track of the current location area of each 
mobile station making use of the system. Of course, as 
a mobile station roams about within the coverage area 
of system, it will change location area. The mobile station 
is able to recognise when this occurs because it listens 
to the cell-specific broadcast messages made by the 
system; these messages include the identity of the cur- 
rent location area in which the mobile station finds itself 
and the mobile station compares this current location- 
area identity with a stored record of the location area 
where it believed itself to be. In the event of the mobile 
station detecting a discrepancy between the braodacast 
location-area identity and its stored record, it will transmit 
a location update request message to the fixed part of 
the system, enabling the latter to update its record of the 
location of the mobile station. 

Information regarding the topology of cells and loca- 
tion areas, such as which cells belong to which location 
areas and which location areas are adjacent, can be 
assembled from the structural configuration of the sys- 
tem. However, this requires operator action with the 
result that there is no guarentee that the assembled infor- 
mation is up-to-date; in particular, changes made to the 
system may not be incorporated into the assenrdDled 
information, or more likely, there will be a significant delay 
In providing and introducing this information. 

Furthermore, certain location-area related informa- 
tion cannot be derived from static configuration data, 
such information including information about the popu- 
lation (in terms of the number of mobile stations) of dif- 
ferent location areas and which ceils form "gateway cells" 
through which mobile stations enter or leave particular 
location areas. 



It is an object of the present invention to provide a 
method by which up-to-date location-area related infor- 
mation can be derived. 

6 Summary of the Invention 

According to one aspect of tiie present invention, 
there is provided a monitoring method for a cellular 
mobile radio system that comprises a fixed part providing 

10 radio coverage in a plurality of cells logically grouped into 
location areas, and mobile stations for communicating 
with the fixed part of the system, each mobile station 
being operative to pass location update messages to tiie 
fixed part at least upon changing location areas; tiie 

15 metiiod involving: 

~ monitoring the location update messages to 
extract location-area related data from each of at 
least some of tiie messages, 
20 -- combining the locatiorvarea related data exti-acted 
from a plurality of the location update messages to 
produce location-area related information, and 
-- outputting the location-area related information. 

25 The location-area related information may comprise 
the identification of the cells making up a location area. 
In this case, tiie location-area related data extracted from 
a location update message will comprise the current cdl 
and location area of the mobile station that sent the mes- 

30 sage. 

Alternatively or additionally, the location-area 
related information may comprise the identification of 
which location areas are adjacent each other. In this 
case, tiie location-area related data extracted from a 

35 location update message will comprise the old and new 
location areas of the mobile station that has sent the 
message upon changing location areas. 

Again, the location-area related information may 
alternatively or additionally comprise the identification of 

40 which location areas are respor^ible for the most loca- 
tion update messages. In this case, the location-area 
related data extracted from a location update message 
comprises the current location area of the mobile station 
tiiat sent the message, and the method further involves 

45 maintaining a count of such messages for each location 
area on which data is extracted. 

Yet another possibility is that the location-area 
related information alternatively or additionally com- 
prises the identification of the particular cells in a specific 

so location area that constitute the primary gateway cells 
for entry to the location area. In this case, the location- 
area related data extracted from a location update mes- 
sage will comprise the current cell and location area of 
the mobile station that sent tiie message, and tiie 

55 method further involves maintaining a count of such 
messages for each cell of the specific location area con- 
cerned. 

Preferably, the location update messages are mon- 
itored across the system to extract for each monitored 
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message the current cell and location area of the mobile 
station that sent the message, a check then being made 
that no cell is associated with more than one location 
area. 

Where the mobile radio system is a GSM-type sys- 
tem, the location update messages are advantageously 
monitored on at least one *A' interface between a Base 
Station Subsystem BSS and a Mobile Switching Center 
MSG. Preferably, the location update messages arie 
monitored across the system on the 'A' interfaces asso- 
ciated with all MSCs. In this case, the method may further 
involve: 

» determining from the location update messages 
nnonitored on the 'A* interfaces, the current location 
area of the mobile station that sent the message; 
" associating the location area determined for each 
monitored message with the MSC associated with 
the 'A* interface on which the message was moni- 
tored; 

- checking that no location area is associated with 
more than one MSC. 

Brief Description of Drawings 



Best Mode for Can-ying Out the Invention 

Figure 1 is a diagram showing the main elements of 
a public land mobile network (PLMNI) based on digital 
cellular radio technology; in particular, the Rgure 1 net- 
work is a GSM network. 

The Figure 1 network comprises a network and 
switching subsystem (NSS) 10 which connects with a 
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A monitoring method, according to the invention, for 
deriving location-area-related informaton in a cellular 
mobile radio network, will now be described, by way of 
non-limiting example, with reference to the accompany- 
ing drawings, in which: 30 



Figure 1 is a block diagram showing the main com- 
ponents of a GSM cellular mobile radio 
system; 

Figure 2 is a diagram illustrating the relationship 
between radio cells and location areas in 
the Figure 1 system; 

Figure 3 is a diagram Illustrating the layered format 
of messages used to carry location update 
requests in the Figure 1 system; 

Figure 4 illustrates the composition of a "Layer 3 
Information'* information element carried 
by the Rgure 3 message; 

Figure 5 illustrates the composition of a "Cell Iden- 
tifier" information element carried by the 
Figure 3 message; and 

Figure 6 is a diagram illustrating the processing of 
information extracted from location update 
request messages for the purpose of deriv- 
ing location-area-related information. 
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plurality of base station subsystems (BSS) 11 ; the BSS 
provide radio communication with mobile stations 12 
(only one of which is shown In Figure 1). The NSS 10 
also comnrtunicates with tiie fixed public network 13 (tiie 
public switched telephone network PSTN and Integrated 
digital services network ISDN). Indeed tiie PLMN can be 
thought of as an access patii to the PSTN/ISDN, tiiough 
calls may also be wholly contained within the PLMN. 

Each BSS 1 1 comprises a base station controller 
(BSC) 17, and a plurality of base transceiver stations 
(BTS) 18 each conti-olled by tiie BSC 17. Each BTS 18 
has radio transmitters and receivers for providing radio 
coverage of a local area known as a 'ceir. 

Signalling and user data (digitised voice and other 
digital data such as computer data) pass between each 
nrK)bile station 1 2 and the BTS 1 8 of the cell in which the 
mobile station is located. As a mobile station moves from 
one cell to another, control of handover of communica- 
tion with the mobile station from the BTS of tiie old cell 
to the BTS of the new cell, is effected by the BSC. 

The radio interfece between a mobile station and 
BTS is standardised within a particular system such as 
GSM. Similariy, the interface between each BTS 18 and 
its associated BSC 1 7. by which user data and signalling 
are exchanged between these elements, is also gener- 
ally standardised (in GSM, this interface is known as the 
*Abis' interface). 

Each BSS 1 1 communicates with a mobile switching 
centre (MSC) 20 of the NSS 10, each MSC 20 generally 
being in communication with several BSS. The interface 
between a BSS and an MSC is again generally stand- 
ardised, this interface being known as tiie 'A* interface in 
GSM. 

In GSM networks, user data and signalling are mul- 
tiplexed across the radio interface, the *Abis* interface 
and the *A* Interface. However, within the NSS, user data 
arxl signalling are handled separately. This is shown in 
Rgure 1 by depicting user-data paths in solid lines and 
signalling paths in dotted lines; when both use the same 
path, a solid line with superimposed white dots is used. 

In the NSS. the user data Is handled by tiie MSCs 
and for a given call, the user data will commonly traverse 
two MSCs 20. Altiiough in Rgure 1 the MSCs 20 are 
shown as directly connected by a solid line, this should 
be understood merely as showing that user-data traffic 
can pass between the MSCs; in practice, whilst a direct 
connection is used where justified by traffic levels, MSCs 
may be connected through the intermediary of the fixed 
public network 13. 

In addition to tiie MSCs 20, user data nnay also be 
handled in the NSS by what in GSM parlance is known 
as a gateway MSC (GMSC) 21 . The purpose of tiie 
GMSC 21 is to handle calls directed to mobile stations 
from outside of tiie PLMN. tiie GMSC determining where 
the call should be routed to catch up with the mobile sta- 
tion. In practice. GMSC functionality is often provided at 
each MSC. 

The remaining components of the NSS 1 0 are con- 
cerned with control functions and these components 
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communicate with each other, with the MSCs and 
GMSC. and with the fixed public network through signal- 
ling links using a signalling system generally based on 
the SS7 ( CCITT Signalling System No.7) standard. 
Within the NSS 1 0 a GSM system uses the MAP (Mobile 
Application Part) protocols for non-circuit-related signal- 
ling traffic and the TUP (Telephone User Part) and ISUP 
(ISDN User Part) for circuit-related signalling traffic. 
Again, the signalling paths between components of the 
NSS 1 0 are not necessarily direct but will generally make 
use of the SS7 network associated with the fixed public 
network. 

The components of the NSS not already described 

are: 

the Home Location Register (HLR) 23 - this contains 
information about subscribers registered with the 
PLMN (such as the services available to a particular 
subscriber and the PLMN network address of the 
MSG where the subscriber is currently located); 
the Visitor Location Register (VLR) 24 - generally, 
each MSG has its own associated VLR which holds 
both subscriber data about users currently visiting 
the area covered by the MSG, and data about the 
current location of each user within the MSGs cov- 
erage area; 

the Authentication Register (AuG) 25 - this compo- 
nent is closely associated with the HLR and holds 
data providing for subscriber identification and 
encryption of calls: 

the Equipment Identify Register (EIR) 26 • this stores 
information about the mobile stations 12 them- 
selves; 

- the SMS Gateway 27 - in GSM, a special "Short 
Message Service" is available, tiiis being provided 
through tiie SMS Gateway 

Three main control functions may be identified In 
regulating calls In the PLMN (the signalling traffic being 
the communication required to implement these func- 
tions). These three functions are: 

radio resource management - this is the task of 
establishing, maintaining and releasing stable con- 
nections between mobile stations and an MSG 
despite movements of a mobile station. This man- 
agement function primarly involves the BSGs txit 
also the BTSs and MSGs. 

mobility management - this is the task of maintain- 
ing up-to-date user location information so as to per- 
mit incoming calls to routed to tiie appropriate 
mobile station; in GSM, tiie address of the MSG in 
the area of which a user is to be found, is stored In 
the user's HLR whilst the user's location witiiin tiiat 
area is held in the VLR associated with the MSG. 
This management function involves the MSGs/VLRs 
and tiie HLR. 

call management - this task involves, as well as the 
usual control of calls as found in the fixed public net- 
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work, the routing of calls towards a mobile station 
when the location of the latter is initially not known. 
In GSM, for calls towards a mobile station from out- 
side of the PLMN in which the user of the mobile 
5 station is registered, it is the task of the GMSG to 

find out from the home HLR of the user being called, 
where that user is and tiien appropriately route the 
incoming call. The call management function 
involves the MSG/VLR. HLR and GMSG. 

10 

Turning now to Figure 2. this Rgure shows a pattern 
of hexagonal cells each representing a corresponding 
radio cell, that is, the coverage area of a BTS (assuming 
that each BTS only covers one area). In Figure 2 only 

IS eight cells have been specifically labelled, these being 
cells G1 to G8. 

Groups of physically adjacent radio cells are logi- 
cally associated, the resultant coverage areas being 
referred to as location areas". Thus, cells G 1 to G 8 are 

20 grouped together and cover a location area L1 . In Figure 
2. six location areas L1 to L6 are shown. 

In GSM systems, the cells associated with each 
MSG (that is, the cells associated witii the BTSs of the 
BSSs connected to the MSG concerned) are divided into 

25 one or more location areas with the only limitation being 
that no location area can contain cells associated with 
more tiian one MSG. Thus, in Figure 2 the cells associ- 
ated with the upper MSG 20 form three location areas 
LI to L3, whilst the cells associated witii the lower MSG 

30 20 form a further three location areas L4 to L6. 

It is worth nothing that the GSM starxiards do not 
themselves require that all the cells associated with a 
particular BSS 11 are in the same location area but this 
will often be the case. 

35 The purpose of grouping cells into location areas is 
to facilitate the task of mobility management In order for 
a mobile station to be located to receive an incoming call, 
two basic approaches are possible. Firstly, a paging 
message could be transmitted in every cell of the PLMN 

40 in order to fiave a searched-fbr mobile station respond 
to identify its position; such an approach is, however, 
very inefficient. The second approach is to have the 
PLMN store location information on each i^er which is 
periodically updated as tiie user (or rather, his mobile 

45 Station) moves around the network. This latter approach 
is the one most usually taken. However, if a location 
update is effected every time a mobile station moves 
from one cell to another, a very large amount of signalling 
traffic would be created. In order to avoid this problem, 

so GSM uses the concept of a location area with a mobile 
station only initiating a location update when it deter- 
mines it has changed location area. Since the PLMN now 
knows the location area of each mobile station, when it 
is necessary to route an incoming call to a particular 

55 mobile, it is only necessary to transmit a paging message 
in the cells of the relevant location area. 

As previously indicated, location information is actu- 
ally stored in two parts with the address of the MSG in 
whose area a mobile station is currently located being 
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stored in the HLR, and the local location information (that 
is, current location area) being stored in the VLR asso- 
ciated with that MSG. 

A mobile station can tell when it has changed loca- 
tion area because the BTS of each cell periodically trans- 
mits the identity of the cell and location area In which it 
is located; by storing this location area information, the 
mobile station can readily tell when it changes location 
area. 

Upon detecting a location area change, the mobile 
station transmits a "location update request" which is 
received by the BTS of the cell in which the mobile station 
is currently to be found. This request is then passed via 
the BSC associated with the BTS, back to the relevant 
MSG. The MSG then updates the location information 
held for the nfx>bile station in the VLR associated with the 
MSG. In the event that a mobile station moves from a 
location area covered by one MSG to a location area cov- 
ered by another MSG. a changeover process Is effected 
between MSGs which also Involves the HLR being 
updated with the address of the MSG into whose area 
the mobile station has now moved. 

A mobile station is also arranged to send out a loca- 
tion update request message, if it receives an Indication 
from the network that it is not known to the VLR in whose 
coverage area rt is currently located. 

Finally, in order to ensure that up-to-date location 
information is maintained on mobile stations, and also to 
enable the databases in the HLR and VLR to be rebuilt 
in case of data loss, each mobile station is arranged to 
send a bcation update request message (a "periodic" 
location update request) if it has not sent such a request 
within a predetermined, network configurable, amount of 
time. 

For whatever reason a location update request is 
generated, it results in the appearance of a correspond- 
ing message on the *A' interface between the BSG and 
MSG concerned. Figure 3 show the format of this mes- 
sage in a GSM system. 

For messages on the 'A* interface, the SS7 SGGP (Sig- 
nalling Gonnection Gontrol Part) and underlying MTP 
(Message Transfer Part) provide the transport service. 
Moreparticxilarly, Information is transported in MTP level 
2 signalling units, the composition of which is: 
Flag Field (8 bits); 

Backward Sequence Number BSN (7 bits); 
Backward- Indicator bit BIB (1 bit); 
Forward Sequence Number BSN (7 bits); 
Forward-Indicator bit BIB (1 bit); 
Length Indicator LI (6 bits); 
Spare SP (2 bits); 

Service Information Octet SIO (8 bits); 

Signalling Information Reld SIF (8n bits); 

Check Field (16 bits); 

Flag Field (8 bits). 
MTP level 3 information is contained in the SIO and in a 
routing label forming part of the level 2 signalling infor- 
mation field. The routing label includes source and des- 
tination addresses for the signalling unit in terms of point 



codes. Above MTP level 3 is the SGGP layer for carrying 
information according to a required service type (con- 
nectionless or connection-oriented); the SGGP header 
Information relates to provision of this service as well as 

5 including further addressing information that, inter alia, 
specifies what is termed a "subsystem number" for iden- 
tifying the user of the transport service provided by the 
SGGP. In the present case, the user is the Base Station 
Subsystem Application Part (BSSAP) peer-to-peer pro- 

10 tocol operating between the BSS and MSG concerned. 
BSSAP messages are identified by a subsystem number 
of "FE" in hex. 

BSSAP is sub-divided into two parts, each BSSAP 
message being associated with one or other part as indi- 

15 cated by a discriminator octet (DSGR in Figure 3). These 
two parts are: 

- BSS Management Application sub-part (BSS- 
MAP) which is used for radio resource (RR) and 
20 BSC management; and 

~ Direct Transfer Application sub-part (DTAP) which 
Is used for the transfer of call control (CM) and mobil- 
ity management (MM) messages. 

26 Location update requests are related to mobility 
management and it might therefore be expected to find 
such requests embedded in DTAP messages. In fact, 
location update requests are embedded in BSSMAP 
messages. The reason for this is that each location 

30 update request requires the establishment of a new radio 
connection between the mobile station concerned and 
the relevant MSG. and the establishment of such a con- 
nection is a radio resource management issue. Indeed, 
whenever a new radio connection is established, the "ini- 

35 tial message" concerned with that connection is piggy- 
backed onto the RR message on the 'A* interface 
involved in setting up the connection through to the rel- 
evant MSG. More particularly, the BSSMAP message 
"Complete Layer 3 Information" is used to carry initial 

40 messages. Now. since the "initial message" associated 
with the making of a location update request is that 
request itself, the location update requests are to be 
found embedded in BSSMAP "Complete Layer 3 Infor- 
mation" messages, these latter being indicated by a 

45 message type octet '010101 IV (the rightmost bit being 
the first bit of the octet). 

Each "Gomplet Layer 3 Information" message com- 
prises two information elements, namely: 

60 ~ Cell Identifier; 

~ Layer 3 Information; 

the contents of which are shown in detail in Figures 5 
and 4 respectively in the case of a location update 
65 request being canried by the "Complete Layer 3 Infbrma- 
tion" message. For each information element the first 
octet identifies the type of the infornrtation element whilst 
the second octet gives its length. 
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It is the "Layer 3 Information" information element 
that actually contains the location update request, this 
being indicated in bits 1 to 6 of octet 4 (see Figure 4). 
The location update type is contained in bits 1 and 2 of 
octet 5 ('LU Type*) and is used to distinguish normal loca- s 
tion update requests resulting from a change in location 
area by a mobile station (LU Type -'00*), from a periodic 
location update request caused by a timeout in the 
mobile station (LU Type = '01'). 

For present purposes, the location-area related data io 
of interest is: 

" the current cell of the mobile station making the 
location update request (octets 6 and 7 of the "Cell 
Identifier" information element); is 
~ the new location area of the mobile station (octets 
4 and 5 of the "Cell Identifier" information elemoit); 
and 

- the old location area of the mobile station (octets 
9 and 1 0 of the "Layer 3 Information" information ele- 20 
ment). 

In accordance with the present invention, the mes- 
sages can-ying location update requests are monitored 
to extract cell and location area (old and new) data. In 2s 
the embodiment shown in Figure 1 , a respective SS7 
monitor 40 is used to monitor each 'A* interface for the 
purpose of detecting location update requests and 
extracting cell and location area related data from each 
such request. The details of how such data can be iden- 30 
tified and extracted will be apparent to persons skilled in 
the art, particularly having regard to the explanation 
given above about where location update requests are 
to be found. However, in general terms, the following 
steps will be followed: 35 

(1) - "Complete Layer 3 Information" BSSMAP mes- 
sages are detected by examining the SCCP subsys- 
tem number to identify BSSAP messages, then the 
discriminator of each BSSAP message to identify 40 
BSSMAP messages, and finally the message type 

of each BSSMAP message to identify "Complete 
Layer 3 Information" messages. 

(2) - the information element content of each "Com- 
plete Layer 3 Information" message is checked to 45 
ensure these elements are "Cell Identifier" and 
"Layer 3 Information". 

(3) - the "Layer 3 Information" irrformation element 
is checked to see if it relates to a location update 
request and if it does, the type of this request is so 
noted. 

(4) - where a location update request is identified, 
the data concerning the cun-ent cell and current 
(new) location area of the mobile station making the 
liocation update request, is extracted from the "Cell ss 
Identifier" information element, and the data con- 
cerning the old location area of the mobile station is 
extracted from the "Layer 3 Information" information 
element. 



The location-area related data extracted from each 
location update request is processed locally by each 
probe 40 and the resultant processed information is peri- 
odically downloaded over a network 41 (sudi as the 
operations and management network associated with 
the main network) to a central workstation 42 where fur- 
ther processing is carried out. Indeed, all processing of 
the extracted location area related information could be 
effected by the workstation 42. 

The main phases and data structures involved in 
processing the location-area related data are illustrated 
in Figure 6. 

The first processing phase is a 'per probe* phase car- 
ried out on the data extracted by each probe (either by 
the probe 40 itself or by the workstation 42). The main 
data structures involved in this processing phase are: 

» an MSC item 33 containing an identifier of the 
MSC associated with the *A' interface monitored by 
the probe (this identifer may be programmed in by 
an operator or automatically derived by the monitor 
by reading the destination point code for the signal 
units carrying the location update requests). 
~ a location area list 34 containing an entry for each 
current (new) locatfon area (Ln ... Lx) identified in the 
location-area related data extracted by the probe 40; 
this list 34 is pointed to by the MSC item 33, the loca- 
tion areas identified in the list being those associated 
with the MSC identified in the MSC item 33. 
~ for each location area identified in the location 
area list 34, a respective: 

- cell list 35 identifying the cells (C^ ... Cf) asso- 
ciated with that location area (a cell is consid- 
ered associated with a location area if the 
location area is the current location area con- 
tained in the "Cell Identifier information ele- 
ment identifying the cell); for each cell in the cell 
list 35, a count is maintained of the number of 
location update requests made with that cell 
identified as the currerrt cell (tiiis is the "hits" 
count in Figure 6). 

- adjacent location-area list 36 identifying the 
location areas (Li^ ... Lp) found to be adjacent 
the location area concerned; a location area is 
considered to an adjacent one when it forms tiie 
"old" location area in a normal location update 
request for which the "new" location area is the 
one of interest. 

Each location area entry in tiie location area list 34 
contains pointers to its associated cell list 35 and 
adjacent location areas list 36. 

During the *per probe' processing phase, as new 
data is extracted from each location update request mon- 
itored by a probe 40, the data is analysed to see if it iden- 
tifies a new location area not previously identified in the 
list 34 maintained for the probe - if it does, a new evXry 
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is added to the list 34. The cell associated with the iden- 
tified location area is then examined and if this cell is not 
already present in the cell list 35 associated with the loca- 
tion area concerned, a corresponding new entry is made 
in list 35 with a "hits" count of one; if the cell is already 5 
known, its "hits" count in list 35 is incremented. Where 
an "old" location area is identified in the extracted loca- 
tion-area related data, this location area Is added to the 
adjacent location area list 36 for the location area con- 
cerned unless a corresponding entry already exists. 10 

The second main processing phase Is a 'per MSG' 
processing phase 31 carried out by workstation 42; In 
this phase the data collected from all the probes associ- 
ated with a particular MSG, are combined. The main data 
structures involved in the phase are the same as for the is 
'per probe' processing phase, the 'per MSG' phase being 
primarily an aggregation of the data from multiple lists 
34, 35 and 36 for a particular MSG into single lists 34, 
35 and 36 for that MSG with the elimination of duplicate 
entries and the adding together of the cell "hits" counts 20 
for any cell which previously appeared in more than one 
list 35. The MSG item 33 is used to identify the groups 
of lists 34, 35 and 36 that need to be combined to con- 
solidate the infornoation for each particular MSG. 

At this stage, since each location area in a GSM sys- 25 
tem should only contain cells associated with one MSG, 
all available information on the cell composition of each 
location area contained in a list 34 for a particular MSG, 
will have been collected and will be contained in the cor- 
responding cell list 35. However, there is no guarentee 30 
that all cells of a location area will have been involved in 
a location update request during the period of monitoring 
by the relevant probes. This is particularly the case in 
respect of any cells ('internal' cells) not located at a 
boundary of the location area concerned, for such inter- 35 
nal cells will not be involved in normal location update 
requests, there being no change in location area when 
such a cell is entered from an adjacent cell. An internal 
cell may nevertheless feature in the cell list 35 of a loca- 
tion area if a periodic location update request has been 40 
issued by a mobile station from that cell. With the above 
caveat, the cell list 35 for each location area associated 
with a particular MSG may be output as the cell compo- 
sition of that location area. 

The information contained in the cell lists 35 after 4S 
the 'per MSG' processing phase will also provide an indi- 
cation, from the "hits" count associated with each cell 
entry, of which cells are the ones mostly involved in loca- 
tion update requests - that is, are the ones through which 
the location areas concerned are mostly entered. The 50 
identity of, for example, the top three such cells ('gate- 
way' cells) for each location area may be identified and 
output. 

Although the 'per MSG' processing does not itself 
involve combining data from location areas associated ss 
with different MSGs. the adjacent location areas list 36 
for each location area associated with a particular loca- 
tion area should be complete after the "per MSG' 
processing phase. The lists 36 can tiierefore be output 
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to identify the adjacent location areas for each location 
area of an MSG. 

The third processing phase involves tiie consolida- 
tion of the lists 34. 35 and 36 collected for all MSGs in 
the overall system. This consolidation involves forming 
a list 37 of MSGs. each entry corresponding to a respec- 
tive one of the MSG items 33 and including a pointer to 
the location area list 34 relevant to the MSG concerned. 

From the consolidated system-wide location area 
information contained in the lists 34 to 37. it is possible 
to ascertain which location areas are most utilised by 
adding up the "hits" counts for the cells of each location 
area and identifying the location areas with the highest 
"hits" counts. 

Using the information contained in the lists 34 to 37. 
it also possible to carry out various consistency checks. 
For example, it is possible to arrange for the workstation 
42 to check that no cell appears in more than one list 35 
(a cell should only be associated with one location area); 
if this check shows that a cell occurs in more than one 
list 35, then an alarm is generated. The workstation 42 
may also be arranged to check that no location area is 
associated with more tiian one MSG as would be the 
case if it contained cells associated with more than one 
MSG; again, detection of an anomdy can be arranged 
to generate an alarm. 

Various modifications are, of course, possible to tiie 
above described monitoring method for deriving loca- 
tion-area related irrformation. Additionally, the monitor- 
ing method can be applied to any appropriate cellular 
radio system and is not restricted in application to GSM- 
type systenrrs. 

Claims 

1 . A monitoring method for a cellular mobile radio sys- 
tem that comprises a fixed part providing radio cov- 
erage in a plurality of cells logically grouped into 
location areas, and mobile stations for communicat- 
ing with said fixed part of the system, each mobile 
station being operative to pass location update mes- 
sages to said fixed part at least upon changing loca- 
tion areas; said method involving: 

~ monitoring said location update messages to 
extract location-area related data from each of 
at least some of said messages, 
- combining said location-area related data 
extracted from a plurality of said location update 
messages to produce location-area related 
information, and 

" outputting said location-area related informa- 
tion. 

2. A monitoring method according to daim 1 , wherein 
said location-area related data extracted from a said 
location update message connprises the current cell 
and location area of the said mobile station that sent 
tiie message, said location-area related information 
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being the identification of the cells making up a said 
location area. 

A monitoring method according to claim 1 . wherein 
said location-area related data extracted from a said 
location update message comprises the old and new 
location areas of the said mobile station that has 
sent said message upon changing location areas, 
said location-area related information being the 
identification of which location areas are adjacent 
each other. 



ated with the *A' interface on which the message 
was monitored; 

" checking that no said location area is associ- 
ated with more than one MSG. 
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A monitoring method according to claim 1 , wherein 
said location-area related data extracted from a said 
location update message comprises the current 
location area of the said mobile station that sent the 
message, said method Involving mairrtaining a count 
of such messages for each location area on which 
data is extracted, and said location-area related 
information being the identification of which location 
areas are responsible for the most location update 
messages. 
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5. A monitoring method according to claim 1 . wherein 
said location-area related data extracted from a said 25 
location update message conprises the current cell 
and location area of the said mobile station that sent 
the message, said method involving maintaining a 
count of such messages for each cell of a said loca- 
tion area, and said location-area related information 30 
being the identification of the cells in that location 
area that constitute the primary gateway cells for 
entry to the location area. 

6. A monitoring method according to claim 1 , wherein 3S 
said location update messages are monitored 
across said system to extract for each monitored 
message the current cell and location area of the 
mobile station that sent the message, a check then 
being made that no cell is associated with more than 4C 
one location area. 

7. A monitoring method according to claim 1 . wherein 
said mobile radio system is a GSM-type system and 
said location update messages are monitored on at 45 
least one *A* interface between a Base Station Sub- 
system BSS and a Mobile Switching Center MSC. 

8. A monitoring method according to claim 7, wherein 
said location update messages are monitored so 
across said system on the 'A* Interfaces associated 
with all MSCs. said method including: 

determining from said location update mes- 
sages monitored on said 'A' interfaces, the cur- ss 
rent location area of tiie mobile station tiiat sent 
tiie message: 

- associating tiie location area determined for 
each monitored message with the MSC assocl- 
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